Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa
File:                     80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa (raw, json)
Hash identifier:          q83uydy7Exzfu2DP0jmMBTkdEfeesh6X0Y1nZiA/fv0=
Subject key identifier:   4C:B7:6A:AC:E4:46:F8:9E:B8:5B:7E:35:92:6A:D3:D2:24:2D:9B:40
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B09BE640ADA448F079900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:09:be:64:0a:da:44:8f:07:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6143b9e5-20ba-41e6-b996-e61d89605ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:a5:cb:9a:23:a4:1c:e8:22:b2:49:b0:ec:
                    a2:6d:8e:21:59:80:52:0b:d1:c7:00:d7:48:04:61:
                    c8:9f:0b:13:1b:4e:c2:b4:52:8a:92:cc:56:15:8c:
                    8e:c1:44:3c:11:22:7a:43:15:28:61:ab:4d:28:3f:
                    9e:8a:5f:9d:b3:ba:f5:e1:7a:96:d8:62:3f:4c:89:
                    dc:55:70:f1:4c:e9:43:9a:25:e0:f8:67:e7:72:28:
                    c8:39:47:7e:95:a6:d9:02:ed:73:c6:a6:5d:a2:67:
                    35:80:59:a7:ba:99:f7:9f:e2:70:eb:3a:b5:c0:66:
                    87:0d:35:10:08:0e:f4:d6:28:f1:a1:1a:61:4e:07:
                    b1:06:33:73:2b:c0:1e:73:97:50:e5:bd:bc:41:f9:
                    d2:53:4b:64:7a:5f:f6:81:bc:bc:cf:74:dd:3e:ff:
                    f6:e3:fb:cc:5e:bd:7a:49:92:7f:67:1f:66:ac:e8:
                    6a:6d:87:87:f9:db:56:4a:be:96:32:d7:cc:98:71:
                    56:43:e8:e6:b1:bb:78:4a:b9:81:f3:59:70:d8:f4:
                    08:a2:1b:36:dc:88:37:72:72:0f:25:95:8c:91:be:
                    91:15:b6:e2:3e:ca:6c:41:65:07:38:b9:49:2a:aa:
                    1a:25:de:d4:d9:3b:c0:54:a1:9d:d7:08:7a:98:72:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B7:6A:AC:E4:46:F8:9E:B8:5B:7E:35:92:6A:D3:D2:24:2D:9B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b6:85:d7:5c:0f:64:ba:fc:9d:5e:ce:3d:d0:06:3f:d2:54:
         fd:ff:cb:c8:91:3d:bb:96:bd:5d:bb:66:b9:e8:a9:a8:0d:e8:
         44:97:d7:36:00:1e:b3:36:96:6a:4a:af:4f:81:ee:c0:38:89:
         b0:fa:03:5a:35:43:cc:f6:a2:93:7a:6a:8c:4c:86:cd:a1:59:
         32:10:88:15:80:e5:1e:9d:35:76:d4:f5:f8:ef:bc:a1:d6:d7:
         f1:82:e8:7c:8f:e3:e6:f7:49:c2:23:f1:92:e7:d9:6e:85:5d:
         59:22:be:81:6b:a9:cb:63:65:e2:4d:ec:31:f2:9e:98:d8:a3:
         ec:a7:50:c0:8a:98:b5:2b:b0:37:66:5d:40:13:7c:fc:3b:b5:
         09:26:f5:00:f4:ca:bf:ea:33:92:26:17:51:c2:5f:02:88:d9:
         d5:31:5d:3c:f9:55:9d:87:96:ff:2e:f3:74:ac:b2:cf:5a:2f:
         40:1c:b9:12:43:cd:ef:dc:d5:d8:90:78:2c:56:7d:35:8d:4b:
         10:2d:ff:35:5b:5b:fa:e6:dd:b8:17:6c:58:96:97:cb:5b:85:
         5b:2d:1a:37:6f:81:f7:70:6a:f6:bf:51:25:57:c0:3b:93:0c:
         a8:91:44:38:da:dd:75:d9:d4:12:91:13:20:b0:b7:03:2e:f1:
         fb:1b:1e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:28 2025 by rpki-client